@trusty-squire/mcp 1.1.13-rc.8 → 1.1.13

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,KAAK,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAErF,MAAM,WAAW,IAAI,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGzC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAG/B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,QAAQ,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvF,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAID,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAMpD,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,SAAS,CAMzE;AAaD,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,EAAE,CAwB9E;AAID,eAAO,MAAM,KAAK,EAAE,IAAI,EAA0B,CAAC;AAEnD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,IAAI,EAAU,GAAG,IAAI,GAAG,IAAI,CAElF;AAGD,OAAO,EAAE,CAAC,EAAE,CAAC;AAIb,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,GACzB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,KAAK,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,IAAI,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGzC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAG/B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,QAAQ,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvF,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAG/E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAID,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAMpD,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,SAAS,CAMzE;AAaD,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,EAAE,CA2B9E;AAID,eAAO,MAAM,KAAK,EAAE,IAAI,EAA0B,CAAC;AAEnD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,IAAI,EAAU,GAAG,IAAI,GAAG,IAAI,CAElF;AAGD,OAAO,EAAE,CAAC,EAAE,CAAC;AAIb,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,GACzB,CAAC"}

package/dist/tools/index.js

@@ -18,6 +18,7 @@ import { auditLogTool } from "./audit-log.js";
 import { OPERATE_TOOLS } from "./provision-drive.js";
 import { listPaymentCardsTool, operatePayTool, operatePaymentStatusTool } from "./operate-pay.js";
 import { deleteCredentialTool, editCredentialTool } from "./credential-mutations.js";
+import { fetchCredentialTool } from "./fetch-credential.js";
 // Re-exported for convenience; defined in its own module to avoid a
 // circular import (tool files import it; index imports the tool files).
 export { ALWAYS_LOAD_META } from "./always-load.js";
@@ -47,6 +48,9 @@ export function buildToolRegistry(env = process.env) {
         editCredentialTool,
         deleteCredentialTool,
         useCredentialTool,
+        // The one approval-gated raw-value path. Listed AFTER use_credential so
+        // the cheaper, never-exposed route is the one the model reads first.
+        fetchCredentialTool,
         // Egress grants: a deployed app uses a vaulted credential via the proxy.
         grantAppAccessTool,
         listAppAccessTool,
@@ -56,8 +60,8 @@ export function buildToolRegistry(env = process.env) {
         ...(diagnosticsProfileEnabled(env) ? diagnosticsTools : []),
         listPaymentCardsTool,
         operatePayTool,
-        // [P0] Non-blocking payment approval: read-only status + a bounded wait,
-        // so a host never has to block an RPC on the human's phone tap.
+        // Non-charging bounded status for pre-charge approval and post-submit
+        // outcomes; operate_pay owns approval continuation and charge execution.
         operatePaymentStatusTool,
         // Interactive host-driven provisioning (operate_start/observe/act/finish
         // plus recipe save/run; workflow kinds are consolidated under operate_act).
@@ -74,5 +78,5 @@ export function findTool(name, tools = TOOLS) {
 export { z };
 // Per-tool re-exports so callers (tests, custom integrations) can
 // import a single tool without going through the TOOLS array.
-export { listCredentialsTool, storeCredentialTool, editCredentialTool, deleteCredentialTool, useCredentialTool, grantAppAccessTool, listAppAccessTool, revokeAppAccessTool, auditLogTool, listExtractFailuresTool, getExtractFailureTool, listPaymentCardsTool, operatePayTool, operatePaymentStatusTool, };
+export { listCredentialsTool, storeCredentialTool, editCredentialTool, deleteCredentialTool, useCredentialTool, fetchCredentialTool, grantAppAccessTool, listAppAccessTool, revokeAppAccessTool, auditLogTool, listExtractFailuresTool, getExtractFailureTool, listPaymentCardsTool, operatePayTool, operatePaymentStatusTool, };
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,oEAAoE;AACpE,sEAAsE;AACtE,iCAAiC;AACjC,EAAE;AACF,sEAAsE;AACtE,8DAA8D;AAC9D,sEAAsE;AACtE,mCAAmC;AAEnC,OAAO,EAAE,CAAC,EAAkC,MAAM,KAAK,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAwBrF,oEAAoE;AACpE,wEAAwE;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,GAAqB;IAC7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAU,CAAC;AAEnF,SAAS,yBAAyB,CAAC,GAAsB;IACvD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO;QACL,mBAAmB;QACnB,oEAAoE;QACpE,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,iBAAiB;QACjB,yEAAyE;QACzE,kBAAkB;QAClB,iBAAiB;QACjB,mBAAmB;QACnB,wEAAwE;QACxE,YAAY;QACZ,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,oBAAoB;QACpB,cAAc;QACd,yEAAyE;QACzE,gEAAgE;QAChE,wBAAwB;QACxB,yEAAyE;QACzE,4EAA4E;QAC5E,GAAG,aAAa;KACP,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,CAAC,MAAM,KAAK,GAAW,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAEnD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAyB,KAAK;IACnE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,OAAO,EAAE,CAAC,EAAE,CAAC;AAEb,kEAAkE;AAClE,8DAA8D;AAC9D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,GACzB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,oEAAoE;AACpE,sEAAsE;AACtE,iCAAiC;AACjC,EAAE;AACF,sEAAsE;AACtE,8DAA8D;AAC9D,sEAAsE;AACtE,mCAAmC;AAEnC,OAAO,EAAE,CAAC,EAAkC,MAAM,KAAK,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AA2B5D,oEAAoE;AACpE,wEAAwE;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,GAAqB;IAC7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAU,CAAC;AAEnF,SAAS,yBAAyB,CAAC,GAAsB;IACvD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO;QACL,mBAAmB;QACnB,oEAAoE;QACpE,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,iBAAiB;QACjB,wEAAwE;QACxE,qEAAqE;QACrE,mBAAmB;QACnB,yEAAyE;QACzE,kBAAkB;QAClB,iBAAiB;QACjB,mBAAmB;QACnB,wEAAwE;QACxE,YAAY;QACZ,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,oBAAoB;QACpB,cAAc;QACd,sEAAsE;QACtE,yEAAyE;QACzE,wBAAwB;QACxB,yEAAyE;QACzE,4EAA4E;QAC5E,GAAG,aAAa;KACP,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,CAAC,MAAM,KAAK,GAAW,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAEnD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAyB,KAAK;IACnE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,OAAO,EAAE,CAAC,EAAE,CAAC;AAEb,kEAAkE;AAClE,8DAA8D;AAC9D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,GACzB,CAAC"}

package/dist/tools/operate-pay.d.ts

@@ -18,7 +18,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     amount_cents?: number | undefined;
     merchant?: string | undefined;
     card_ref?: string | undefined;
-    phase?: "single" | "fill_card" | "confirm" | undefined;
+    phase?: "single" | "confirm" | "fill_card" | undefined;
     three_ds_wait_seconds?: number | undefined;
     session_id?: string | undefined;
     card_label?: string | undefined;
@@ -29,7 +29,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     amount_cents?: number | undefined;
     merchant?: string | undefined;
     card_ref?: string | undefined;
-    phase?: "single" | "fill_card" | "confirm" | undefined;
+    phase?: "single" | "confirm" | "fill_card" | undefined;
     three_ds_wait_seconds?: number | undefined;
     session_id?: string | undefined;
     card_label?: string | undefined;
@@ -40,7 +40,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     amount_cents?: number | undefined;
     merchant?: string | undefined;
     card_ref?: string | undefined;
-    phase?: "single" | "fill_card" | "confirm" | undefined;
+    phase?: "single" | "confirm" | "fill_card" | undefined;
     three_ds_wait_seconds?: number | undefined;
     session_id?: string | undefined;
     card_label?: string | undefined;
@@ -51,7 +51,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     amount_cents?: number | undefined;
     merchant?: string | undefined;
     card_ref?: string | undefined;
-    phase?: "single" | "fill_card" | "confirm" | undefined;
+    phase?: "single" | "confirm" | "fill_card" | undefined;
     three_ds_wait_seconds?: number | undefined;
     session_id?: string | undefined;
     card_label?: string | undefined;

package/dist/tools/operate-pay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operate-pay.d.ts","sourceRoot":"","sources":["../../src/tools/operate-pay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6BxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAElD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+Bb,CAAC;AAiDL,eAAO,MAAM,oBAAoB,EAAE,IAYlC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAwV5D,CAAC;AA+OF,QAAA,MAAM,wBAAwB;;;;;;;;;EAG5B,CAAC;AAEH,eAAO,MAAM,wBAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CA2CnF,CAAC"}
+{"version":3,"file":"operate-pay.d.ts","sourceRoot":"","sources":["../../src/tools/operate-pay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AASlD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+Bb,CAAC;AAiDL,eAAO,MAAM,oBAAoB,EAAE,IAYlC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAqX5D,CAAC;AAsSF,QAAA,MAAM,wBAAwB;;;;;;;;;EAG5B,CAAC;AAEH,eAAO,MAAM,wBAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAiCnF,CAAC"}

package/dist/tools/operate-pay.js

@@ -1,7 +1,14 @@
 import { z } from "zod";
-import { activeCartCheckoutForOrigin, activeProvisionBrowserForPayment, claimActivePaymentForOperatePay, clearActivePendingCardFill, clearActivePendingThreeDsIfCurrent, completeActivePaymentLeaseWithPendingApproval, completeActivePaymentLeaseWithPendingFill, getActivePendingApproval, getActivePendingThreeDs, recordActivePaymentProvenance, releaseActivePaymentLease, retainActivePaymentFieldSeal, restoreActivePendingCardFillAfterConfirmThrow, setActivePendingThreeDs, withPaymentSessionCall, } from "../bot/provision-session.js";
+import { armPaymentDispatchHandoff, activeCartCheckoutForOrigin, activeProvisionBrowserForPayment, claimActivePaymentForOperatePay, clearActivePendingCardFill, clearActivePendingThreeDsIfCurrent, completeActivePendingApprovalWithTerminalStatus, completeActivePaymentLeaseWithPendingApproval, completeActivePaymentLeaseWithPendingFill, completeActivePaymentLeaseWithTerminalApproval, coordinatePaymentDispatchAudit, finishPaymentDispatchHandoff, getActivePendingApproval, getActivePendingThreeDs, getTerminalPaymentApproval, recordActivePaymentProvenance, releaseActivePaymentLease, retainActivePaymentFieldSeal, restoreActivePendingCardFillAfterConfirmThrow, setActivePendingThreeDs, withPaymentSessionCall, } from "../bot/provision-session.js";
 import { classifyApprovalCandidate, executeOperatePay, executeOperatePayConfirm, } from "../bot/pay-operator.js";
+import { isPaymentApprovalTransportTimeout } from "../api-client.js";
 import { assertApi } from "./index.js";
+// Long enough for a ready human to approve without making the MCP request as
+// long-lived as the approval itself (five minutes for saved-card ceremonies,
+// longer for JIT). If this bound expires, session state retains the same
+// approval and the next operate_pay call continues waiting on it.
+const OPERATE_PAY_APPROVAL_WAIT_MS = 60_000;
+const PAYMENT_APPROVAL_RESPONSE_RESERVE_MS = 500;
 const inputSchema = z
     .object({
     session_id: z.string().uuid().optional(),
@@ -78,38 +85,18 @@ export const listPaymentCardsTool = {
 };
 export const operatePayTool = {
     name: "operate_pay",
-    description: "Pay the checkout in the addressed operate_start browser session. session_id is required " +
-        "when multiple operator sessions are active (and optional only for a sole local session). " +
-        'phase="single" (the default, also implied by omitting phase) is an ordinary one-step checkout. ' +
-        "Reads the live merchant and checkout total independently of informational checkout_state. " +
-        "When the live total cannot be machine-read, caller-supplied amount_cents and currency become " +
-        "the authoritative approval amount and take precedence over a prior cart observation. " +
-        "creates a phone approval link, waits for approval, " +
-        "verifies the passkey-signed purchase mandate, opens the card only in this process, " +
-        "fills common checkout fields, submits, and audits only the last four digits. Never " +
-        "solves 3-D Secure; waits for user completion, then returns a needs_user handoff if unresolved " +
-        "— including a decoupled/out-of-band app-push challenge that had not resolved yet, in which " +
-        "case call operate_payment_status (not operate_pay again) to keep checking the same already-" +
-        "submitted charge. If the issuer/app challenge shows issuer, network, or last-four evidence " +
-        "for a different card, returns a structured payment_instrument_mismatch warning without " +
-        "altering or cancelling the challenge; the cardholder retains the decision. " +
-        "With no card_ref/card_label and no card on file, the approval link becomes a first-time " +
-        "add-card ceremony and the card is bound server-side before the mandate is signed. " +
-        "On approval resume, an unreadable live checkout reuses the original mandate-bound checkout; " +
-        "a successfully-read checkout with a different amount, currency, merchant, or origin returns " +
-        "payment_amount_mismatch without filling the card. " +
-        "For a SPLIT checkout (a card-entry step with no visible total, e.g. Rakuten): call with " +
-        'phase="fill_card" on that step — the approval amount is sourced from the most recent real ' +
-        "total this session observed (e.g. the cart page) only when the card-entry page itself shows " +
-        "none and amount_cents plus currency were not supplied, and releases the card into recognized " +
-        "payment-provider fields without charging. Then drive the checkout to the order-confirmation " +
-        "step, VERIFY the live final total there matches the returned approved amount_cents and " +
-        "currency, and place the order yourself via operate_act, handling any 3-D Secure challenge " +
-        "directly — Trusty Squire never re-reads the total or clicks the pay/place-order control. Call " +
-        'phase="confirm" any time after the fill to close out the approval; it is not a prerequisite ' +
-        "to placing the order. Exactly one human approval per purchase. If the payment gets stuck or " +
-        "the card is declined, recover with operate_finish and start a fresh session — operate_pay " +
-        "does not support refilling a different card mid-session.",
+    description: "Pay the live checkout in an operate_start session (session_id is required when more than one " +
+        "session exists). The default single phase reads the merchant and total, surfaces one phone " +
+        "approval, and waits server-side for up to one minute; re-calling after a pending result resumes " +
+        "that same approval. It verifies the signed mandate, opens the card only in this process, " +
+        "rechecks approval immediately before the charge click, and reports submitted, 3-D Secure, or " +
+        "unknown outcomes truthfully. Use operate_payment_status for an unresolved submitted charge. " +
+        "Without a stored card, the approval link performs first-time card binding. A resumed approval " +
+        "keeps its original terms and fails closed if a readable live checkout differs. For split " +
+        'checkouts, phase="fill_card" fills recognized provider fields without charging; verify the ' +
+        'final total and place the order with operate_act, then phase="confirm" closes the approval. ' +
+        "Exactly one human approval is valid per purchase attempt; finish the session before retrying " +
+        "a stuck, denied, expired, or ambiguous attempt.",
     inputSchema,
     jsonInputSchema: {
         type: "object",
@@ -161,6 +148,24 @@ export const operatePayTool = {
         const phase = args.phase === "single" ? undefined : args.phase;
         return await withPaymentSessionCall(args.session_id, async (session) => {
             const paymentClaim = claimActivePaymentForOperatePay(phase, session);
+            if (paymentClaim.kind === "terminal") {
+                const state = paymentClaim.state;
+                return paymentResult(session, {
+                    status: paymentClaim.terminalStatus === "denied"
+                        ? "payment_approval_denied"
+                        : paymentClaim.terminalStatus === "expired"
+                            ? "payment_approval_timeout"
+                            : "payment_confirmation_failed",
+                    approval_id: state.approval_id,
+                    approval_url: state.approval_url,
+                    merchant: state.checkout.merchant,
+                    amount_cents: state.checkout.amount_cents,
+                    currency: state.checkout.currency,
+                    ...(paymentClaim.terminalStatus === "expired" && state.jit && state.boundCardRef !== null
+                        ? { card_persisted: true }
+                        : {}),
+                });
+            }
             // Confirm step of a split checkout: the card is already filled (and the
             // mandate already signed), so no card resolution and no PayPal gate.
             // confirm no longer touches the browser or charges anything — it only
@@ -197,6 +202,7 @@ export const operatePayTool = {
             let paymentLeaseCompleted = false;
             let paymentFieldsCleared = true;
             let approvalPending = null;
+            let paymentDispatchHandoff = null;
             let operatorStarted = false;
             try {
                 const browser = await activeProvisionBrowserForPayment(session);
@@ -324,18 +330,37 @@ export const operatePayTool = {
                     onApprovalPending: (state) => {
                         approvalPending = state;
                     },
+                    onApprovalTerminal: (state, terminalStatus) => {
+                        completeActivePaymentLeaseWithTerminalApproval(paymentLease, state, terminalStatus, session);
+                        paymentLeaseCompleted = true;
+                    },
+                    onThreeDsHandoffArmed: (state) => {
+                        paymentDispatchHandoff = state;
+                        armPaymentDispatchHandoff(state, session);
+                    },
+                    coordinateThreeDsAudit: async (state, recordAudit) => await coordinatePaymentDispatchAudit(state, recordAudit, session),
                     onThreeDsPending: (state) => {
                         setActivePendingThreeDs(state, session);
                     },
+                    onThreeDsCleared: (state) => {
+                        clearActivePendingThreeDsIfCurrent(state, session);
+                    },
                     ...(cartFallbackCheckout !== undefined ? { cartFallbackCheckout } : {}),
                     ...(paymentClaim.resumeApproval !== undefined
                         ? { resumeFrom: paymentClaim.resumeApproval }
                         : {}),
-                    // [P0] Never block the RPC waiting on the human — one live check,
-                    // then hand back approval_pending. operate_payment_status (or
-                    // simply calling operate_pay again, which resumes this SAME
-                    // approval) is how the host finds out when the phone responds.
-                    pollBudgetMs: 0,
+                    // Approval detection belongs here, not in an agent polling loop.
+                    // The URL is surfaced before executeOperatePay enters this bounded
+                    // wait. On exhaustion, onApprovalPending persists the SAME approval
+                    // so a later operate_pay call continues without another passkey gate.
+                    // A client without progress notifications must receive the newly
+                    // minted URL before it can ask a human to act. Its first call may
+                    // therefore return immediately; the resumed call already has the
+                    // URL and uses the normal system-owned wait.
+                    pollBudgetMs: context?.paymentApprovalWaitMs ??
+                        (context?.notifyUser !== undefined || paymentClaim.resumeApproval !== undefined
+                            ? OPERATE_PAY_APPROVAL_WAIT_MS
+                            : 0),
                 });
                 if (result.payment_fields_cleared === false)
                     paymentFieldsCleared = false;
@@ -383,6 +408,9 @@ export const operatePayTool = {
                 throw error;
             }
             finally {
+                if (paymentDispatchHandoff !== null) {
+                    finishPaymentDispatchHandoff(paymentDispatchHandoff, session);
+                }
                 if (!paymentLeaseCompleted) {
                     releaseActivePaymentLease(paymentLease, paymentFieldsCleared, session);
                 }
@@ -393,17 +421,20 @@ export const operatePayTool = {
 // [P0] Used by operate_payment_status: maps the LIVE server record
 // (never the locally-cached approval terms) to a status the host can act on.
 // Never opens the sealed card or calls confirm — read-only, no side effects.
-// `boundMs`, when given, races the server call so this can never outlast the
-// caller's own bound even though the server's wait_for_submission window is
-// a fixed ~15s.
-async function readApprovalStatus(api, state, sessionId, waitForSubmission, boundMs) {
-    const fetchApproval = api.getPaymentApproval(state.approval_id, waitForSubmission ? "wait-peek" : "peek");
-    const approval = boundMs === undefined
-        ? await fetchApproval
-        : await Promise.race([
-            fetchApproval,
-            new Promise((resolve) => setTimeout(() => resolve(null), boundMs)),
-        ]);
+// `serverWaitMs`, when given, uses one server wait plus one transport grace.
+async function readApprovalStatus(api, state, sessionId, waitForSubmission, serverWaitMs) {
+    const fetchApproval = waitForSubmission
+        ? api
+            .getPaymentApproval(state.approval_id, "wait-peek", serverWaitMs, serverWaitMs === undefined
+            ? undefined
+            : serverWaitMs + PAYMENT_APPROVAL_RESPONSE_RESERVE_MS)
+            .catch((error) => {
+            if (isPaymentApprovalTransportTimeout(error))
+                return null;
+            throw error;
+        })
+        : api.getPaymentApproval(state.approval_id, "peek");
+    const approval = await fetchApproval;
     if (approval === null) {
         return {
             status: "pending",
@@ -416,7 +447,13 @@ async function readApprovalStatus(api, state, sessionId, waitForSubmission, boun
             candidate_submitted: false,
             candidate_kind: state.reviewVerified === true ? "review" : "none",
             ready_to_charge: false,
-            next: { tool: "operate_payment_status", session_id: sessionId, wait_seconds: 15 },
+            next: {
+                tool: "operate_pay",
+                session_id: sessionId,
+                hint: "The bounded status wait ended before the human responded. Call operate_pay again " +
+                    "with the same arguments; it resumes this approval, waits server-side, and proceeds " +
+                    "to charge after approval.",
+            },
         };
     }
     const candidateSubmitted = typeof approval.jws === "string" && typeof approval.sealed_card === "string";
@@ -426,6 +463,7 @@ async function readApprovalStatus(api, state, sessionId, waitForSubmission, boun
         : observedCandidateKind;
     const readyToCharge = observedCandidateKind === "approval";
     const expired = approval.status === "expired";
+    const terminalWithoutCharge = expired || approval.status === "denied";
     return {
         status: expired ? "expired" : approval.status,
         approval_id: state.approval_id,
@@ -438,7 +476,7 @@ async function readApprovalStatus(api, state, sessionId, waitForSubmission, boun
         candidate_submitted: candidateSubmitted,
         candidate_kind: candidateKind,
         ready_to_charge: readyToCharge,
-        ...(expired
+        ...(terminalWithoutCharge
             ? {}
             : readyToCharge
                 ? {
@@ -464,11 +502,11 @@ async function readApprovalStatus(api, state, sessionId, waitForSubmission, boun
                     : candidateKind === "review"
                         ? {
                             next: {
-                                tool: "operate_payment_status",
+                                tool: "operate_pay",
                                 session_id: sessionId,
-                                wait_seconds: 15,
                                 hint: "The review signature was verified. Final payment approval is still required; " +
-                                    "refresh the approval page if the final prompt is not visible.",
+                                    "refresh the approval page if the final prompt is not visible, then call " +
+                                    "operate_pay once to wait and continue this same approval.",
                             },
                         }
                         : candidateKind === "invalid"
@@ -481,9 +519,10 @@ async function readApprovalStatus(api, state, sessionId, waitForSubmission, boun
                             }
                             : {
                                 next: {
-                                    tool: "operate_payment_status",
+                                    tool: "operate_pay",
                                     session_id: sessionId,
-                                    wait_seconds: 15,
+                                    hint: "Call operate_pay again with the same arguments. It resumes this approval " +
+                                        "and waits server-side instead of requiring an agent polling loop.",
                                 },
                             }),
     };
@@ -507,6 +546,8 @@ async function threeDsStatusResult(api, session, state, waitSeconds) {
     const expiredAtEntry = Date.now() >= state.deadline;
     const boundMs = expiredAtEntry || waitSeconds <= 0 ? 0 : Math.min(Math.max(waitSeconds * 1000, 1_000), 15_000);
     const resolution = await browser.waitForThreeDsResolution(boundMs);
+    if (resolution === "challenge_pending")
+        state.outcome = "three_ds";
     const mismatch = browser.paymentInstrumentMismatch?.();
     if (mismatch !== undefined)
         state.payment_instrument_mismatch ??= mismatch;
@@ -514,7 +555,7 @@ async function threeDsStatusResult(api, session, state, waitSeconds) {
     const unresolvedPastDeadline = terminalStatus === null && (expiredAtEntry || Date.now() >= state.deadline);
     if (terminalStatus === null && !unresolvedPastDeadline) {
         return {
-            status: "payment_3ds_pending",
+            status: state.outcome === "three_ds" ? "payment_3ds_pending" : "payment_outcome_unknown",
             approval_url: state.approval_url,
             merchant: state.checkout.merchant,
             amount_cents: state.checkout.amount_cents,
@@ -525,16 +566,24 @@ async function threeDsStatusResult(api, session, state, waitSeconds) {
             next: { tool: "operate_payment_status", session_id: session.id, wait_seconds: 15 },
         };
     }
-    const finalStatus = terminalStatus ?? "payment_3ds_unresolved";
+    const finalStatus = terminalStatus ??
+        (state.outcome === "three_ds" ? "payment_3ds_unresolved" : "payment_outcome_unknown");
     let auditRecorded = true;
     if (terminalStatus === null) {
-        await api.auditPayment({
-            ...state.checkout,
-            last4: state.last4,
-            status: finalStatus,
-            approval_id: state.approval_id,
-            ...(state.mandate_id !== undefined ? { mandate_id: state.mandate_id } : {}),
-        });
+        try {
+            await api.auditPayment({
+                ...state.checkout,
+                last4: state.last4,
+                status: finalStatus,
+                approval_id: state.approval_id,
+                ...(state.mandate_id !== undefined ? { mandate_id: state.mandate_id } : {}),
+            });
+        }
+        catch (error) {
+            if (state.outcome === "three_ds")
+                throw error;
+            auditRecorded = false;
+        }
     }
     else {
         try {
@@ -550,7 +599,10 @@ async function threeDsStatusResult(api, session, state, waitSeconds) {
             auditRecorded = false;
         }
     }
-    clearActivePendingThreeDsIfCurrent(state, session);
+    const merchantReconciliationRequired = terminalStatus === null && state.outcome === "unknown";
+    if (!merchantReconciliationRequired) {
+        clearActivePendingThreeDsIfCurrent(state, session);
+    }
     return {
         status: finalStatus,
         audit_recorded: auditRecorded,
@@ -564,29 +616,54 @@ async function threeDsStatusResult(api, session, state, waitSeconds) {
         ...(terminalStatus === null
             ? {
                 needs_user: {
-                    wall: "3ds",
-                    message: "The 3-D Secure challenge never reached a confirmed outcome within the resumable " +
-                        "window. Check the merchant account directly for whether the order was placed " +
-                        "before retrying — Trusty Squire will not re-release this card without a fresh " +
-                        "approval.",
+                    wall: state.outcome === "three_ds" ? "3ds" : "merchant_reconciliation",
+                    message: state.outcome === "three_ds"
+                        ? "The 3-D Secure challenge never reached a confirmed outcome within the resumable " +
+                            "window. Check the merchant account directly for whether the order was placed " +
+                            "before retrying — Trusty Squire will not re-release this card without a fresh " +
+                            "approval."
+                        : "The merchant outcome remains unknown. Check the merchant account directly for " +
+                            "whether the order was placed before retrying; this payment attempt remains " +
+                            "reserved until the session is closed.",
                     resume: "checkout",
                 },
             }
             : {}),
     };
 }
-// Backs operate_payment_status: an immediate peek (waitSeconds <= 0) never
-// blocks, a positive waitSeconds bound-waits (clamped to [1s, 15s] — the
-// server's wait-peek window is a fixed ~15s regardless of what's requested,
-// and threeDsStatusResult clamps to the same shape for its own live check).
+// Backs operate_payment_status with an immediate peek or one server wait.
 async function paymentStatusResult(api, session, waitSeconds) {
     const state = getActivePendingApproval(session);
     if (state !== null) {
         if (waitSeconds <= 0) {
-            return paymentResult(session, await readApprovalStatus(api, state, session.id, false));
+            const result = await readApprovalStatus(api, state, session.id, false);
+            if (result.status === "denied" || result.status === "expired") {
+                completeActivePendingApprovalWithTerminalStatus(state, result.status, session);
+            }
+            return paymentResult(session, result);
+        }
+        const result = await readApprovalStatus(api, state, session.id, true, Math.min(Math.max(waitSeconds * 1000, 1_000), 15_000));
+        if (result.status === "denied" || result.status === "expired") {
+            completeActivePendingApprovalWithTerminalStatus(state, result.status, session);
         }
-        const boundMs = Math.min(Math.max(waitSeconds * 1000, 1_000), 15_000);
-        return paymentResult(session, await readApprovalStatus(api, state, session.id, true, boundMs));
+        return paymentResult(session, result);
+    }
+    const terminalApproval = getTerminalPaymentApproval(session);
+    if (terminalApproval !== null) {
+        const state = terminalApproval.state;
+        return paymentResult(session, {
+            status: terminalApproval.terminalStatus,
+            approval_id: state.approval_id,
+            approval_url: state.approval_url,
+            expires_at: new Date(state.deadline).toISOString(),
+            phase: state.phase ?? null,
+            merchant: state.checkout.merchant,
+            amount_cents: state.checkout.amount_cents,
+            currency: state.checkout.currency,
+            candidate_submitted: false,
+            candidate_kind: state.reviewVerified === true ? "review" : "none",
+            ready_to_charge: false,
+        });
     }
     const threeDsState = getActivePendingThreeDs(session);
     if (threeDsState !== null) {
@@ -596,25 +673,15 @@ async function paymentStatusResult(api, session, waitSeconds) {
 }
 const paymentStatusInputSchema = z.object({
     session_id: z.string().uuid().optional(),
-    wait_seconds: z.number().int().min(0).max(15).optional(),
+    wait_seconds: z.number().int().min(0).max(60).optional(),
 });
 export const operatePaymentStatusTool = {
     name: "operate_payment_status",
-    description: "Report the status of the addressed session's payment approval currently awaiting " +
-        "the human's phone tap, if any — started by an operate_pay call that returned approval_pending. " +
-        "Also covers an already-submitted charge whose 3-D Secure challenge (including a decoupled/" +
-        "out-of-band app-push) had not resolved when a prior operate_pay call's own wait ended (that " +
-        'call returns payment_3ds_required or payment_outcome_unknown with needs_user.wall="3ds" and ' +
-        "a next hint pointing here) — call this again to keep checking rather than re-calling " +
-        "operate_pay, which does not resume a post-submit 3DS wait; reports payment_3ds_pending while " +
-        "still unresolved. Never re-releases the card or creates a new approval. Pass `wait_seconds` " +
-        "(0-15, default 0) to bound-wait for a change instead of an instant peek; never blocks longer " +
-        "than that. Never verifies a mandate or opens a card. Only candidate_kind=approval with " +
-        "ready_to_charge=true is a final authorization; a review candidate still requires final " +
-        "approval. Preserves any passively observed payment_instrument_mismatch warning from issuer/" +
-        "app evidence without altering the challenge. When a pending 3-D Secure outcome resolves or " +
-        "reaches its deadline, this records " +
-        "a terminal payment audit and clears that session's pending tracking.",
+    description: "Read the addressed session's pending approval or already-submitted outcome without opening a " +
+        "card, confirming a mandate, or creating another approval. Prefer re-calling operate_pay for a " +
+        "pending approval; this tool performs only one server wait. Use it repeatedly only for a " +
+        "submitted 3-D Secure or unknown outcome. It reports 3DS only from observed evidence, preserves " +
+        "instrument-mismatch warnings, and retains custody until a terminal audit or reconciliation.",
     inputSchema: paymentStatusInputSchema,
     jsonInputSchema: {
         type: "object",
@@ -627,8 +694,8 @@ export const operatePaymentStatusTool = {
             wait_seconds: {
                 type: "integer",
                 minimum: 0,
-                maximum: 15,
-                description: "Upper bound on this call's wait. 0 (default) is an instant peek; 1-15 bound-waits for a change.",
+                maximum: 60,
+                description: "Upper bound in seconds. Approval status uses one wait of at most 15 seconds; 0 is an instant peek.",
             },
         },
     },